@taimos/cdk-controltower
    Preparing search index...

    Interface SsoPermissionConfig<T, S>

    interface SsoPermissionConfig<T extends string, S extends string> {
        adminSetOptions?: PermissionSetOptions;
        billingSetOptions?: PermissionSetOptions;
        defaultAssignmentsForNewAccount?: {
            groupName: S;
            permissionSetName: string;
        }[];
        groupPermissions: AccountConfig<T, GroupConfig<S, string[]>>;
        permissionSets?: { [name: string]: PermissionSetOptions };
        readOnlySetOptions?: PermissionSetOptions;
    }

    Type Parameters

    • T extends string
    • S extends string
    Index

    Properties

    adminSetOptions?: PermissionSetOptions

    optional configuration options for the Admin permission set

    AdministratorAccess with 8 hours session duration

    billingSetOptions?: PermissionSetOptions

    optional configuration options for the Admin permission set

    ReadOnlyAccess and job-function/Billing with 8 hours session duration

    defaultAssignmentsForNewAccount?: { groupName: S; permissionSetName: string }[]

    Collection of group - permission set assignments for every new account

    Use this to grant your admins permissions for every account directly after creation

    groupPermissions: AccountConfig<T, GroupConfig<S, string[]>>
    permissionSets?: { [name: string]: PermissionSetOptions }

    add more permission sets here besides Admin, Billing, and ReadOnly

    readOnlySetOptions?: PermissionSetOptions

    optional configuration options for the ReadOnly permission set

    ReadOnlyAccess with 8 hours session duration